Crittiks uses the following service providers to run the platform. Pending legal review: [ASH: publish this list at crittiks.com/subprocessors and commit to notifying workspace owners before adding a new one; LAWYER: confirm notice period.]
| Provider | What it does for Crittiks | Personal information processed | Location |
|---|---|---|---|
| DigitalOcean | Hosting of the application, background workers, database and cache | All account information and customer content | India (Bangalore) |
| DigitalOcean Spaces | File storage for documents, signed agreements, attachments and uploads | Files and their contents | Singapore |
| Cloudflare | Domain name system (DNS) | Technical request data | Global network |
| Resend | Sending emails from the platform (invitations, signing requests, invoices, notifications) and, where a customer uses a verified sending domain, sending their CRM emails | Recipient names and email addresses, email content | Japan (Tokyo region) and United States |
| Nylas | Connecting users' email mailboxes for the CRM: syncing messages with contacts, sending, and open and click tracking | Email metadata and content relating to the customer's contacts, access tokens | United States |
| Stripe | Billing Crittiks subscriptions; processing card payments on customers' own Stripe accounts when they connect them | Billing contact details, payment information (held by Stripe) | United States and global |
| Anthropic | Generating AI-assisted content when a user uses an AI feature | The text submitted and related workspace context for that request | United States |
| Google, Microsoft, Zoom | Calendar sync and video meetings when a user connects their own account | Calendar events, meeting details, account identifiers | Per the user's own account with each provider |
| Xero, Intuit (QuickBooks) | Accounting sync when a workspace owner connects their own organisation | Customer names and contact details, invoices, payments | Per the customer's own account with each provider |
| Jitsi (8x8, meet.jit.si) | Instant video rooms and huddles | Participants' audio, video and display names during a call (not recorded by Crittiks) | Global |
| Sentry | Error monitoring (when enabled) | Error reports, which may include user identifiers and technical data; configured to strip secrets | United States |
| Better Stack | Uptime monitoring | Technical availability data only | Pending legal review: [check provider region] |
| Spotify | Optional music widget a user chooses to connect | The user's Spotify account identifier and access token | Per the user's own Spotify account |
Pending legal review: [ASH: keep this list accurate as vendors change, for example if OpenAI or another AI provider is enabled in the AI settings.]